NetSight
medium6.5

CVE-2022-27581

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data i…

Impact

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

Affected products

VendorProductAffected versions
SickRfu610-10600 Firmware
before 2.25
SickRfu610-10601 Firmware
before 2.25
SickRfu610-10603 Firmware
before 2.25
SickRfu610-10604 Firmware
before 2.25
SickRfu610-10605 Firmware
before 2.25
SickRfu610-10607 Firmware
before 2.25
SickRfu610-10609 Firmware
before 2.25
SickRfu610-10610 Firmware
before 2.25
SickRfu610-10613 Firmware
before 2.25
SickRfu610-10614 Firmware
before 2.25
SickRfu610-10618 Firmware
before 2.25
SickRfu610-10700 Firmware
before 2.25

Weakness classification

References